Cybersecurity Analyst – Cloud & Product Vulnerability
Fluke is leading the world in creating software, test tools and technology that support customers today and in the future. We are a customer‑obsessed market leader with a strong reputation for reliability, quality, and safety.
A wholly owned subsidiary of Fortive Corporation (www.fortive.com), Fluke is a global corporation headquartered in the greater Seattle area. Driven by the proven Fortive Business System, Fluke offers the passion of a startup with the resources of a Fortune 500 company. We are focused on the growth of our individual employees, teams, and the Fluke brand.
Fortive’s essential technology makes the world stronger, safer, and smarter. We accelerate transformation across a broad range of applications including environmental, health and safety compliance, industrial condition monitoring, next‑generation product design, and healthcare safety solutions.
We are a global industrial technology innovator with a startup spirit. Our forward‑looking companies lead the way in software‑powered workflow solutions, data‑driven intelligence, AI‑powered automation, cloud‑native security, and other disruptive technologies. We’re a force for progress, working alongside customers and partners to solve challenges on a global scale—from workplace safety in the most demanding conditions to sustainable industrial innovation.
We are a diverse team 17,000 strong, united by a dynamic, inclusive culture and energized by limitless learning and growth. We use the Fortive Business System (FBS) to accelerate our positive impact.
At Fortive, we believe in you. We believe in your potential—your ability to learn, grow, and make a difference.
At Fortive, we believe in us. We believe in the power of people working together to solve problems no one could solve alone.
At Fortive, we believe in growth. We’re honest about what’s working and what isn’t, and we never stop improving and innovating.
Fortive: For you, for us, for growth.
Description:As a Cybersecurity Analyst – Cloud & Vulnerability Focus, you will play a critical role in strengthening Fluke’s security posture across web applications, cloud environments, embedded systems, and infrastructure. You will lead efforts in vulnerability management, cloud security, endpoint protection, and secure development lifecycle activities. This includes managing vulnerabilities, improving Cloud Security posture, ensuring CrowdStrike coverage, and collaborating across engineering and IT teams to remediate risks.
Additional responsibilities include supporting automation development for security workflows, contributing to TPRM processes, and driving cross‑functional security initiatives across firmware, DevOps, and product engineering.
Responsibilities:- Vulnerability Identification and Management:
- Scan, identify, validate, and document vulnerabilities across web applications, cloud platforms, endpoints, and infrastructure.
- Prioritize and assist remediation by working closely with engineering, DevOps, IT, and product teams.
- Automate vulnerability reporting dashboards and tracking workflows.
- Cloud Security (AWS/Azure/GCP):
- Assess and monitor cloud resources for misconfigurations, IAM risk, network exposures, and storage security gaps.
- Support implementation of cloud‑native security controls and DevSecOps integrations.
- Collaborate with cloud and DevOps teams to ensure secure configuration baselines.
- Endpoint Security & CrowdStrike Management:
- Ensure CrowdStrike Falcon coverage across all managed assets.
- Review, analyze, and triage endpoint alerts, escalating critical issues.
- Work with IT to ensure master images are configured with the latest security agents and policies.
- Secure Development Lifecycle (SDL):
- Support SAST/DAST integrations and review findings with developers.
- Promote secure coding practices, dependency security, and CI/CD pipeline hardening.
- Assist teams in threat modeling and embedding security early in design.
- Security Tooling Coverage:
- Ensure all standard security tools—including endpoint agents, scanners, and monitoring tools—are installed and active across devices.
- Work with IT to validate deployment accuracy and configuration compliance.
- Asset Inventory Maintenance:
- Maintain accurate inventories of applications, domains, infrastructure components, and ownership mappings.
- Support CMDB accuracy and lifecycle tracking.
- Monitor and Improve Security Metrics:
- Contribute to improving internal security posture metrics, Bitsight score, and related KPIs.
- Ensure vulnerabilities are remediated within SLA timelines.
- Security Monitoring and Alert Management:
- Review, analyze, and triage alerts from vulnerability scanners, cloud security tools, and endpoint protection systems.
- Escalate high-risk findings with clear documentation and context.
- Reporting and Documentation:
- Provide regular reports for leadership and stakeholders on vulnerability trends and remediation progress.
- Maintain documentation for tools, workflows, processes, and best practices.
- Process Improvement & Automation:
- Support continuous improvement of vulnerability management workflows.
- Build automation using Python/JavaScript and scripting tools to enhance efficiency and scalability.
Qualifications and Experience:Skills and Work Traits:
- Strong understanding of system security principles and common vulnerabilities.
- Experience with cloud security concepts, IAM, and misconfiguration analysis.
- Knowledge of endpoint protection tools, especially CrowdStrike Falcon.
- Foundational experience in vulnerability assessment tools.
- Experience with DevSecOps, SAST/DAST, and automation frameworks preferred.
- Detail‑oriented with strong accountability and documentation skills.
- Ability to prioritize tasks and collaborate across teams.
- Willingness to learn and grow in advanced security domains.
Education:
- B.Tech in Cybersecurity, Computer Science, Engineering, or related field OR equivalent work experience.
